Bug 250912

Summary:	"WKWebViews should correctly indicate whether passkeys are available"
Product:	WebKit	Reporter:	Jason Lee <jlee32>
Component:	New Bugs	Assignee:	Jason Lee <jlee32>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	webkit-bug-importer
Priority:	P2	Keywords:	InRadar
Version:	WebKit Nightly Build
Hardware:	Unspecified
OS:	Unspecified

Description Jason Lee 2023-01-20 12:53:55 PST

"In WKWebView, we only allow passkeys to be used if it’s in an entitled web browser or has matching associated domain. However, isUserVerifyingPlatformAuthenticatorAvailable() and isConditionalMediationAvailable() will both return true in all WKWebViews regardless of this, which is incorrect. We should make these two calls respect whether passkeys are actually available."

Comment 1 Jason Lee 2023-01-20 12:54:06 PST

<rdar://problem/104194528>

Comment 2 Jason Lee 2023-01-20 13:01:08 PST

Pull request: https://github.com/WebKit/WebKit/pull/8891

Comment 3 EWS 2023-01-23 17:06:46 PST

Committed 259253@main (0cf1f113fe36): <https://commits.webkit.org/259253@main>

Reviewed commits have been landed. Closing PR #8891 and removing active labels.